StackRadar

CVE-2026-25210

High

Advisory

Published 30 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,202
of 17,790 indexed, latest versions
Container images
1,169
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,202 of 17,790 indexed charts deploy, on 1,169 images.

Affected packageAffected versionsFixed inImages
expatdeb2.1.0-4ubuntu1, 2.1.0-4ubuntu1.4, 2.1.0-7ubuntu0.16.04.2, 2.1.0-7ubuntu0.16.04.3+30 more2.1.0-4ubuntu1.4+esm11, 2.1.0-7ubuntu0.16.04.5+esm11, 2.2.5-3ubuntu0.9+esm3, 2.2.9-1ubuntu0.8+esm1+4 more972
expatapk2.5.0-r4, 2.6.2-r0, 2.6.3-r0, 2.6.4-r0+6 more2.7.4-r0197
OSV records
ALPINE-CVE-2026-25210DEBIAN-CVE-2026-25210CGA-5v3h-h3q3-xg43UBUNTU-CVE-2026-25210
Also known as
CGA-mf53-85qx-vr2x, USN-8022-1, USN-8022-2

Charts affected

1,202 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
expat@2.5.0-1
no fix listed

Open the chart page →

7,685
xkopsxkops0.1.02 of 5See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2026-25210.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
expat@2.5.0-1+deb12u1
no fix listed
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
expat@2.6.3-r0
2.7.4-r0

Open the chart page →

13,197

Container images carrying it

1,169 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ispras/svacer:11-2-042aa9fa9f189
expat@2.4.7-1ubuntu0.6
2.4.7-1ubuntu0.7
1
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
istio/examples-helloworld-v1:latest328b237e4fb1
expat@2.5.0-1
no fix listed
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
expat@2.5.0-1
no fix listed
1
istio/install-cni:1.10.32232f365aed6
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
istio/node-agent-k8s:1.2.9268ab879ea51
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
1
istio/operator:1.10.3655eefa11c84
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
istio/pilot:1.10.0294ca55bd1cc
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
istio/pilot:1.2.9c09319753454
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
1
istio/pilot:1.10.3e7e110a421c2
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
istio/proxyv2:1.2.90c78be035e98
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
1
istio/proxyv2:1.9.687a9db561d2e
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
istio/proxyv2:1.10.088c6c693e67a
expat@2.2.5-3ubuntu0.2
2.2.5-3ubuntu0.9+esm3
1
ixsystems/truecommand:3.2.019c218455cd2
expat@2.7.1-2
2.8.2-1~deb13u1
1
jacobalberty/unifi:v7.1.664a3616625dda
expat@2.2.5-3ubuntu0.7
2.2.5-3ubuntu0.9+esm3
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
expat@2.2.5-3ubuntu0.9
2.2.5-3ubuntu0.9+esm3
1
jacobalberty/unifi:5.10.19c409924e2463
expat@2.1.0-7ubuntu0.16.04.3
2.1.0-7ubuntu0.16.04.5+esm11
1
jaedb/iris:latest048cfbf58d57
expat@2.5.0-1+deb12u1
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
jbtronics/part-db1:latest5db71f6db59d
expat@2.5.0-1+deb12u3
no fix listed
1
jeboehm/mailserver-filter:5.0.92e756949e537d
expat@2.7.0-r0
2.7.4-r0
1
jeboehm/mailserver-web:5.0.929da13edf5aa8
expat@2.7.1-r0
2.7.4-r0
1
jedi132000/nextapp:latestdc2a81e92f23
expat@2.2.9-1ubuntu0.4
2.2.9-1ubuntu0.8+esm1
1
jellyfin/jellyfin:10.11.81694ff069f0c
expat@2.7.1-2
2.8.2-1~deb13u1
1
jellyfin/jellyfin:10.11.717285f9cce63
expat@2.7.1-2
2.8.2-1~deb13u1
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
expat@2.5.0-1+deb12u1
no fix listed
1
jellyfin/jellyfin:10.11.6333b64771663
expat@2.7.1-2
2.8.2-1~deb13u1
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
expat@2.5.0-1
no fix listed
1
jellyfin/jellyfin:10.10.77ae36aab93ef
expat@2.5.0-1+deb12u1
no fix listed
1
jellyfin/jellyfin:10.10.696b09723b22f
expat@2.5.0-1+deb12u1
no fix listed
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
expat@2.5.0-1
no fix listed
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
expat@2.5.0-1
no fix listed
1
jhipster/jhipster-registry:latest7184525acd4d
expat@2.2.9-1ubuntu0.8
2.2.9-1ubuntu0.8+esm1
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
expat@2.5.0-1
no fix listed
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
expat@2.2.9-1ubuntu0.6
2.2.9-1ubuntu0.8+esm1
1
jlesage/firefox:v25.03.1055c28defe31
expat@2.7.0-r0
2.7.4-r0
1
jmferrer/azure-devops-agent:latest030f68ec6998
expat@2.1.0-7ubuntu0.16.04.5
2.1.0-7ubuntu0.16.04.5+esm11
1
jordan/icinga2:latestf75025fe8ea8
expat@2.5.0-1+deb12u2
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
expat@2.5.0-1+deb12u2
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
expat@2.2.9-1build1
2.2.9-1ubuntu0.8+esm1
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
expat@2.6.1-2ubuntu0.1
2.6.1-2ubuntu0.4
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
expat@2.4.7-1ubuntu0.2
2.4.7-1ubuntu0.7
1
kennethreitz/httpbin:latest599fe5e50731
expat@2.2.5-3
2.2.5-3ubuntu0.9+esm3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.